FortiBranchSASE Ordering Guide

The FortiBranchSASE (FBS) series is purpose-built to provide security and connectivity, intended to be used for small remote sites where local security services are unlikely to be present. In some use cases, customers can streamline deployment by opting to use FBS devices, eliminating the complexity of managing a local security stack at each remote branch.

FBS devices offer fast and versatile connectivity via fiber or copper and establish an IPsec tunnel to the nearest FortiSASE instance for data inspection. FBS devices enable remote management through the FortiSASE portal and deliver security services via SASE cloud or a FortiOS-based solution, such as a remote FortiGate or a cloud-based virtual FortiGate. All traffic generated behind FBS is secured by applying data protection measures at FortiSASE POP or the remote FortiOS instance, ensuring that small remote sites receive robust security and protection. Ordering is simple, select the Hardware FBS device and FortiSASE subscription bundle.

Note: FEX-200F does not have a FortiSASE bundle, please select 595 and 247 which is equivalent to bundle.

ORDER INFORMATION

FREQUENTLY ASKED QUESTIONS

Do FEX-200F and FBS devices provide LTE/5G WAN connectivity?

No. Thin Edge devices are Ethernet-only products in the FortiExtender line, supporting a cost-effective means of rolling out Thin Edge devices via Ethernet, if LTE is not desired and internet connectivity is present at the branch locations for FortiSASE service.

What is the "Thin Edge" concept?

Thin edge refers to a minimalistic approach to deployments where limited on-site equipment is used, focusing on centralized security and control. It's designed for small sites like micro-branches, home offices, and temporary setups that require connectivity with minimal hardware.

What is "LAN-Extension" Technology with FortiGate?

The FortiGate LAN extension allows you to seamlessly connect FortiExtenders and FBS devices into a remote FortiGate at an HQ or centralized location via VXLAN over IPSec. LAN-Extension technology allows FortiGate to extend its local LAN to a remote location using FEX or FBS devices, and hosts connecting behind FBS logically appear as FortiGate's internal LAN and managed from FortiGate. FBS Thin-Edge devices also use LAN-Extension technology to connect to the FortiSASE POP, from where FBS devices are provisioned and managed, thus, connecting hosts behind FBS appliance receive security from FortiSASE cloud.

Does the FBS product line require FortiSASE to operate?

No, while FortiBranchSASE naturally fits with our FortiSASE solution for thin edge deployments, it can also operate with any FortiOS based management solution, such as a remote FortiGate appliance, a FortiGate VM, or FortiGate-as-a-Service.

What licenses do I need to use FortiBranchSASE?

When using FortiBranchSASE units with FortiSASE, a FortiSASE device subscription is required. Select the FortiSASE subscription bundle SKU with appropriate FBS Hardware, apart from 200F which does not have bundle SKU, select a-la-carte SKUs for 200F.

What types of use cases are ideal for FortiBranch SASE?

FBS devices can be used in various use cases and deployment scenarios but three are highlighted below as an example:

• Micro-branches: small offices needing central management, visibility, and policy consistency without heavy investment.
• Home Offices: For executives or high-priority users with more equipment than a typical laptop, requiring secure, seamless connectivity.
• Temporary Pop-ups: Sites like kiosks or event setups that need rapid deployment and takedown with secure connectivity.

How does FortiBranch SASE handles scalability?

Please check current updates for FEX/FBS supported in LAN-Extension mode with FortiGate, it varies between 16 to 1024 devices depending on FortiGate model and FortiGate VM.